Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
File:                     323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier:          mDKI3fNjgDNobKrxL85GJKVH78h3rEa5HjmXCRSoA2Y=
Subject key identifier:   ED:6F:2D:D0:CA:D0:A0:34:28:8C:DF:E1:3F:66:C0:BC:46:BE:A4:A5
Certificate issuer:       /CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
Certificate serial:       56B2A7717432EA0F7704FD0CA76FD3ED2EDCCD81
Authority key identifier: DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa
Signing time:             Wed 24 Dec 2025 06:50:50 +0000
ROA not before:           Wed 24 Dec 2025 06:45:50 +0000
ROA not after:            Wed 23 Dec 2026 06:50:50 +0000
asID:                     214955
IP address blocks:        2602:f92a:a46d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b2:a7:71:74:32:ea:0f:77:04:fd:0c:a7:6f:d3:ed:2e:dc:cd:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d
        Validity
            Not Before: Dec 24 06:45:50 2025 GMT
            Not After : Dec 23 06:50:50 2026 GMT
        Subject: CN=ED6F2DD0CAD0A034288CDFE13F66C0BC46BEA4A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:4d:cf:ac:e7:00:00:9d:31:67:01:b9:8b:
                    88:f4:c4:b8:eb:6c:15:a5:fa:5e:d3:ac:ab:c9:66:
                    9a:e7:30:94:40:ab:d2:f8:fd:fd:45:b1:b7:9b:32:
                    7c:8b:2e:59:21:2d:1c:b4:a2:19:cf:53:2d:ea:61:
                    37:7e:10:43:a8:24:68:dc:7c:10:43:6b:c3:b9:e4:
                    29:c3:50:39:d9:8b:00:9a:1a:87:47:ef:be:08:e9:
                    60:8d:93:0a:39:2b:f5:5b:4e:ad:bd:16:2f:8c:34:
                    28:fa:59:ee:c1:41:2e:d8:ea:c5:60:84:bb:dd:61:
                    93:39:7c:32:d2:40:32:b9:99:98:b7:82:14:87:7d:
                    e8:11:e7:fd:05:1b:c2:26:8b:7a:7f:ca:ae:8a:08:
                    ab:90:d6:77:b0:8d:79:05:67:e2:52:6f:a7:17:58:
                    cf:43:00:c8:32:68:cb:eb:81:f4:53:da:fe:a2:31:
                    66:b1:9e:4d:31:28:84:48:ba:e4:c1:bc:5a:3c:f5:
                    85:a1:3e:22:bc:60:c7:7d:54:69:e6:db:b5:8e:27:
                    51:5d:c4:81:e9:ef:00:e9:66:20:18:f3:5c:0c:eb:
                    fc:39:66:c9:36:1c:b1:2c:21:59:39:70:65:58:17:
                    0a:92:dc:6a:5f:e1:e7:fe:bf:65:2a:1c:11:b3:f3:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6F:2D:D0:CA:D0:A0:34:28:8C:DF:E1:3F:66:C0:BC:46:BE:A4:A5
            X509v3 Authority Key Identifier:
                keyid:DE:F9:CF:6D:4F:F8:42:24:03:A0:B6:5E:13:9A:B5:3C:60:8B:92:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/DEF9CF6D4FF8422403A0B65E139AB53C608B9212.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f33cf59-ae35-41d4-8252-d9bdbaba4210/a22aa82bd6af16d70a699d34ed843d71620176f10e2010d22d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/1/323630323a663932613a613436643a3a2f34382d3438203d3e20323134393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f92a:a46d::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:70:fe:66:f6:90:36:bc:9c:1b:45:37:f8:70:c7:06:0d:
         93:43:50:a5:13:63:3d:f7:29:4b:04:b2:a2:ca:40:56:96:6a:
         7f:35:6f:54:d7:fc:63:ab:a3:62:43:09:0b:e8:0d:86:0b:a0:
         6a:33:61:5c:e5:86:8e:0b:1a:72:4d:1a:6c:3a:56:41:ea:51:
         51:0f:8b:32:86:25:4b:fe:bb:3e:61:c5:7f:fd:53:14:1b:b0:
         73:60:af:08:ac:69:24:91:2c:65:11:b6:ce:65:3a:09:e1:04:
         19:d4:eb:72:03:27:50:e8:ac:b3:fe:b7:ee:4f:5b:90:97:82:
         d2:fe:1b:c7:9b:e2:55:ea:15:ed:9a:cf:cf:21:51:7a:a1:53:
         b9:2a:a5:e9:1b:8c:0a:42:17:f5:f2:c3:71:6a:2c:ac:1c:db:
         4d:a5:4d:23:91:25:80:c2:88:c1:ec:74:6f:6d:22:17:72:f0:
         14:02:48:60:30:98:d7:b9:ff:7b:f7:eb:d6:97:da:96:60:d3:
         55:6a:5b:b5:ff:c5:e1:b1:0e:76:65:c5:7f:f4:3d:84:8c:c1:
         0a:58:fe:d6:71:7b:1a:44:fb:28:4c:4f:1f:b1:7e:40:69:c1:
         f3:d2:ba:94:29:5f:3f:c2:da:21:32:54:7c:87:f1:56:c0:59:
         b6:30:73:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----